Privacy Policy

This Privacy Policy describes how Confera, LLC ("Company," "we," "us," or "our"), operating the EasyDep platform, collects, uses, and shares information about you when you use our website, platform, APIs, and related services (collectively, the "Service").

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our practices, please do not use the Service.

1. Our Role: Data Controller and Data Processor

We act in two distinct capacities depending on the type of data involved:

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, and password when you create an account
• Billing Information: Payment card details and billing address, processed through our third-party payment processor (we do not store full card numbers on our servers)
• Communications: Messages, support requests, and other correspondence you send to us

2.2 Information Collected Automatically

• Usage Data: Pages visited, features used, deployment configurations, and interactions with the Service
• Device and Connection Information: IP address, browser type and version, operating system, device identifiers, and referring URLs
• Product Analytics: We use PostHog, a product analytics platform, to collect information about how you interact with the Service. This includes button clicks, page views, navigation patterns, feature usage, and other behavioral events. PostHog may collect your IP address, browser type, device information, and session data. This data is used to understand how the Service is used and to improve the user experience. PostHog processes data on servers located in the United States. For more information, see PostHog's privacy policy at posthog.com/privacy
• Infrastructure Logs: Technical metadata related to your deployments, including server performance metrics, error logs, and resource utilization data, collected solely for service provision and troubleshooting

2.3 Information We Do Not Collect

We do not access, monitor, or collect the contents of your deployed applications or the data your end users store within those applications. Your application data remains within your infrastructure and under your control.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: To provide, maintain, and improve the Service, including deploying applications, managing infrastructure, and processing payments
• Communication: To respond to your inquiries, provide technical support, and send service-related notices
• Analytics and Improvement: To understand how the Service is used and to develop new features and improvements
• Security: To detect, prevent, and address fraud, abuse, and security incidents
• Legal Compliance: To comply with applicable laws, regulations, legal processes, and governmental requests

We do not sell your personal information to third parties. We do not use your personal information for targeted advertising.

4. How We Share Your Information

We may share your information only in the following circumstances:

• Service Providers: With third-party vendors who perform services on our behalf, such as payment processing, hosting, analytics, and customer support
• Legal Requirements: When required by law, subpoena, court order, or other legal process
• Business Transfers: In connection with a merger, acquisition, reorganization, bankruptcy, or sale of assets
• With Your Consent: When you have given us explicit consent to share your information

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect and use information about you and your interaction with the Service:

• Essential Cookies: Required for the Service to function properly
• Analytics Cookies: We use PostHog for product analytics to understand usage patterns
• Preference Cookies: Remember your settings and preferences for future visits

You can control cookies through your browser settings. We honor Global Privacy Control (GPC) signals and Do Not Track browser settings.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with the Service. When your account is terminated or deleted, we will delete or anonymize your personal information within a reasonable time period, except where required by law.

7. Data Security

We implement appropriate technical and organizational security measures to protect your personal information. These measures include encryption in transit and at rest, access controls, and regular security assessments. However, no method of transmission over the Internet is 100% secure.

8. International Data Transfers

We are based in the United States. If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the United States. For EEA/UK/Swiss users, we ensure transfers comply with applicable data protection laws.

9. Your Rights

9.1 GDPR Rights (EEA/UK/Switzerland)

• Access, correct, or delete your personal data
• Object to or restrict processing
• Request data portability
• Withdraw consent and lodge complaints

9.2 CCPA/CPRA Rights (California)

• Know what personal information we collect and disclose
• Request deletion or correction
• Opt out of sale/sharing (note: we do not sell personal information)
• Non-discrimination for exercising rights

To exercise your rights, contact us at privacy@easydep.io.

10. Children's Privacy

The Service is not directed to children under 16. We do not knowingly collect personal information from children under 16.

11. Third-Party Services

The Service may contain links to third-party services. This Privacy Policy does not apply to such third-party services. Applications you deploy through the Service may have their own privacy policies — you are solely responsible for the privacy practices of your deployed applications.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy and updating the "Last updated" date. Your continued use constitutes acceptance.

13. Contact Information